711267 matches found
CVE-2023-21837
CVE-2023-21837 POC,EXP, chatGPT for me code import socket CVE-2023-21837 def checkvulnerabilitytargethost, targetport: create socket object s = socket.socketsocket.AFINET, socket.SOCKSTREAM set timeout to 30 seconds s.settimeout30 try: connect to target s.connecttargethost, targetport send exploi...
CVE-2023-29929
CVE-2023-29929: Remote "Instakill" DoS in Kemp LoadMaster via DNS Packet Kemp LoadMaster devices firmware 7.2.60 suffer from a critical buffer overflow vulnerability in the isreverse and locatefqdn methods of the libkemplink.so library. The vulnerability stems from an undersized 256-byte buffer...
CVE-2022-34715-POC
CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys version 10.0.20348.825 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9 r8=0000001000000020...
CVE-2022-24122
CVE-2022-24122 Simple Denial of Service using CVE-2022-24122 It works with 1 core system and it has 80% probability of success with 2 cores...
onionjuggler
OnionJuggler Feature-rich onion service manager for UNIX-like operating systems written in POSIX compliant shellscript OnionJuggler is a minimal requirement, portable collection of scripts and documentation to help the service operator juggle manage his onions. WARNING:do not trust this repo yet,...
awesome-censys-queries
Awesome Censys Queries A collection of fascinating and bizarre Censys Search queries. Contributing Found an awesome query? Submit it here Interested in contributing in another way? See the contributing guidelines Resources Censys Search CensysGPT Beta - AI Generated Queries Legacy Search Queries ...
nmap-vulners
nmap-vulners Turn an nmap service scan into a ranked list of CVEs, exploits and what is being attacked in the wild. One NSE script that takes the software nmap already identified, asks the Vulners database what is known about it, and prints the answer inside the scan report - worst first, by what...
Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-
CVE-2026-49975 - HTTP/2 Bomb Proof of Concept Description CVE-2026-49975, also known as HTTP/2 Bomb , is a remote denial-of-service DoS vulnerability that affects most major web servers in their default HTTP/2 configuration. The vulnerability was discovered by OpenAI Codex by combining two...
CVE-2009-4049
CVE-2009-4049 Heap-based buffer overflow in aswRdr.sys aka the TDI RDR driver in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service memory corruption or possibly gain privileges via crafted arguments to IOCTL 0x80002024. While part of the reason as to why I di...
IFA
IFA Disk Flooding Attack via IndexedDB IFA is an Proof of Concept PoC that demonstrates how an attacker can exploit the IndexedDB API in popular web browsers to carry out a disk flooding attack. This attack specifically leverages the lack of restrictions in IndexedDB, allowing the browser to stor...
CobaltBus
CobaltBus Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus Setup 1. Create an Azure Service Bus 2. Create a Shared access policy Connection string that can only Send and Listen 3. Edit the static connectionString variable in Beacon C projects to match t...
CVE-2026-42533
CVE-2026-42533 — nginx map/regex キャプチャ破壊 追跡サイト CVE-2026-42533 パッチステータストラッカーのソース: nginx の map/regex キャプチャ破壊ヒープオーバーフローに対する修正をどのディストリビューションが出荷したかを記録するシングルページサイト。 事実が存在する場所 バグに関するすべて — 影響を受けるバージョンと修正済みバージョン、アップストリームの修正、発見と開示のクレジット、および現在のディストリビューションごとのパッチステータス — はトラッカーページに属し、この README には属しません: レンダリング:...
cve-2024-7646
CVE-2024-7646 Description In default, nginx.ingress.kubernetes.io/server-snippet is disabled, but due to this cve, nginx.ingress.kubernetes.io/auth-tls-verify-client can still insert custom snippets, or even lua code can be included. Fixed version ingress-nginx controller v1.11.2 - fixed by...
Detection-and-Mitigation-script-for-CVE-2021-42717
Detection-and-Mitigation-script-for-CVE-2021-42717 Detection and Mitigation script for CVE-2021-42717 - ModSecurity DoS Vulnerability in JSON Parsing ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in...
SharpNoPSExec
SharpNoPSExec File less command execution for lateral movement. SharpNoPSExec will query all services and randomly pick one with a start type disable or manual, the current status stopped and with LocalSystem privileges to reuse them. Once it select the service it will save its current state,...
ComoDoS
技术细节 见：https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html...
WSSAT
WSSAT - Web Service Security Assessment Tool WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it...
CVE-2022-21907
CVE-2022-21907 - HTTP Protocol Stack Remote Code Execution Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author NU11SECURITY and michelep Description: HTTP Protocol Stack Remote Code Execution...
fuzzbench
FuzzBench: ファザーベンチマークのサービス FuzzBenchは、実際のベンチマークの多種多様なセットに対してファザーを評価する無料サービスであり、Google規模で動作します。FuzzBenchの目標は、ファジング研究を厳密に評価し、コミュニティがその成果を採用しやすくすることです。研究コミュニティのメンバーがファザーを提供し、評価手法の改善に関するフィードバックをいただくことを歓迎します。 FuzzBenchが提供するもの： ファザーを統合するための簡単なAPI。...